Privacy Policy

Insurance Standards and Practices Group (ISPG, we, us, or our) respects the privacy of visitors, prospective clients, clients, authorized client representatives, specialists, employees, contractors, and other people who interact with our website, secure platform, and professional services. This Privacy Policy explains the personal information we collect, how we use and disclose it, the choices available to individuals, and the safeguards we use.

This Policy applies to ispggroup.com, ISPG account registration and onboarding, engagement requests, the client portal, specialist workspace, management tools, and related communications. A written engagement agreement, confidentiality agreement, court order, or applicable law may impose additional requirements. If there is a conflict, the more specific binding requirement controls for that engagement.

Information you provide

• Identity and contact information, such as name, organization, title, email address, telephone number, and mailing address.
• Account information, including sign-in credentials, authentication status, organization membership, role, permissions, and account preferences.
• Inquiry and engagement information, including requested services, consultation details, conflict-check information, matter descriptions, participants, deadlines, and communications.
• Client and matter content, including documents, insurance records, policies, applications, claim or litigation materials, property and program information, evidence, findings, comments, internal approvals, and deliverables uploaded to or created in the platform.
• Transaction and administrative information, including proposals, agreements, signatures, invoices, retainers, payment status, billing contacts, and records needed to administer an engagement. ISPG does not collect complete payment-card numbers through the platform.
• Professional and workforce information supplied by applicants, specialists, employees, contractors, vendors, or referral partners.
• Accessibility requests, support requests, feedback, and any other information you choose to provide.

Information collected automatically

When you use the website or platform, ISPG and its service providers may collect internet protocol address, browser and device type, operating system, referring and exit pages, dates and times, pages or functions used, session and error data, security events, authentication records, file activity, and similar technical information. We use necessary cookies or comparable technologies for authentication, preferences, security, and operation. ISPG does not currently use optional advertising cookies. If optional analytics or marketing technologies are introduced, this Policy and any applicable cookie notice will be updated before those technologies are activated.

Information from other sources

We may receive information from a client organization, an authorized representative, counsel, a party to a matter, a referral source, a public record, a service provider, or another source relevant to an inquiry or engagement. Clients and users are responsible for having authority to provide information about other people.

• Provide, secure, administer, and improve the website, accounts, portal, workspaces, and professional services.
• Evaluate inquiries, schedule consultations, conduct conflict screening, establish engagements, assign work, communicate, and manage deadlines and deliverables.
• Organize documents and evidence; develop findings, reports, presentations, and other work product; conduct quality review; and maintain an engagement record.
• Process agreements, signatures, invoices, retainers, and payment records.
• Authenticate users, apply role- and organization-based permissions, investigate suspected misuse, preserve audit history, prevent fraud, and protect ISPG, its clients, and others.
• Operate the knowledge center and internal assistant. Technology may help retrieve, classify, summarize, or draft information, but qualified people remain responsible for reviewing professional analysis, recommendations, and opinions.
• Respond to support and accessibility requests; maintain business records; comply with law, legal process, professional obligations, and insurance requirements; and establish, exercise, or defend legal claims.
• Send service communications and, where permitted, information about ISPG services or insights. Recipients may opt out of promotional email without affecting necessary account or engagement communications.

ISPG may disclose information only as reasonably necessary for the purposes described in this Policy:

• To the client organization and its authorized users, subject to the permissions assigned to their accounts.
• To ISPG personnel, specialists, contractors, and professional advisers who need the information and are subject to appropriate duties or agreements.
• To technology, hosting, storage, authentication, communications, scheduling, electronic-signature, payment, accounting, security, and support providers acting for ISPG under appropriate service and data-protection terms.
• To courts, regulators, law enforcement, insurers, auditors, or other parties when required or permitted by law, legal process, professional obligation, or a good-faith need to protect rights, safety, property, or the integrity of the services.
• In connection with a merger, financing, reorganization, sale of assets, or similar transaction, subject to reasonable confidentiality and legal protections.
• At your direction, with your authorization, or as otherwise disclosed when the information is collected.

ISPG does not sell personal information for money. ISPG does not presently use personal information for cross-context behavioral advertising.

The portal is designed for business and professional records, some of which may be confidential, privileged, proprietary, or subject to a protective order. A confidentiality or privilege label helps administer access but does not create attorney-client privilege, work-product protection, or another legal protection by itself. Users should upload only information authorized for ISPG to receive and should avoid unnecessary Social Security numbers, complete financial-account numbers, medical records, biometric data, or other highly sensitive personal information unless the engagement requires it and ISPG has approved a secure process in writing.

ISPG is not a law firm or health-care provider, and the platform is not represented as a system designed to satisfy every industry-specific data rule. A client with regulated data must identify the requirement before transfer so the parties can determine whether additional terms, controls, or an alternative exchange method are required.

ISPG may use rules-based tools or artificial-intelligence-assisted features to support search, organization, summarization, drafting, workflow, or quality review. These tools may produce incomplete or inaccurate output. ISPG does not rely on an automated tool alone to issue a final professional opinion or make a material engagement decision. Before client or matter information is sent to an external artificial-intelligence provider, ISPG reviews the provider, purpose, contract terms, retention settings, security controls, and whether client authorization is required.

Necessary technologies support sign-in, security, routing, user preferences, and core functions. ISPG does not currently use optional advertising cookies. If ISPG enables optional analytics or marketing technologies, it will update this Policy and provide any notice or choice required by law before activation. Browser controls may limit cookies, but blocking necessary technologies can prevent parts of the portal from working.

ISPG retains information for as long as reasonably necessary for the purpose collected, the engagement agreement, professional and insurance requirements, dispute preservation, security, backup cycles, and applicable law. Retention periods may differ by record type. Some sensitive history may be append-only to preserve accountability. When information is no longer required, ISPG will delete, anonymize, or securely isolate it when reasonably practicable. Backup copies may remain for a limited period until overwritten under the applicable backup schedule.

ISPG uses administrative, technical, and physical measures intended to protect information, including authentication, role- and organization-based access controls, restricted internal records, time-limited document access, activity history, and vendor controls. No transmission, storage system, or security program is completely secure. Users must protect credentials, use a unique strong password, keep contact information current, sign out of shared devices, and promptly report suspected unauthorized access. ISPG will respond to security incidents and provide legally required notices in accordance with applicable law.

Depending on the relationship and applicable law, an individual may ask to access, correct, or delete personal information; receive a copy; restrict or object to certain processing; withdraw consent; or appeal a decision. These rights are not absolute. ISPG may need to verify identity and authority and may retain information required for an engagement, legal claim, security, professional obligation, or another lawful reason. If information belongs to a client organization, ISPG may direct the request to that organization or coordinate with it.

Account users may update certain profile information within the platform. Promotional-email recipients may use the unsubscribe option or contact ISPG. Necessary service, security, billing, and engagement messages will continue while the relevant relationship exists.

The website and platform are intended for business users and are not directed to children under 13. ISPG does not knowingly collect personal information directly from a child under 13 through the website. If ISPG learns that it has done so without legally sufficient authorization, it will take reasonable steps to delete the information. Engagement records involving minors must be handled under the client agreement and applicable law.

ISPG is based in Florida and the services are operated for users in the United States. Information may be processed in jurisdictions where ISPG or its service providers operate. Users outside the United States should not submit personal information until ISPG confirms that the engagement and required transfer safeguards are appropriate.

The website or platform may link to or interoperate with third-party services. Their privacy practices are governed by their own notices and contracts. ISPG is not responsible for an unrelated third party’s practices, but it will evaluate vendors used to process ISPG information and apply contractual and security controls appropriate to the service.

ISPG may revise this Policy as its services, technology, or legal obligations change. The posted version will show an effective date. If a change materially affects how ISPG handles information already collected, ISPG will provide additional notice when required.

Privacy questions and requests may be sent to support@ispggroup.com. Accessibility requests should use the contact method in the Accessibility Statement. Security concerns should be identified clearly so they can be routed promptly. Do not send sensitive client files through ordinary email unless ISPG instructs you to do so.